BA faces largest-ever group privacy claim in UK over data breach

BA is facing the largest group claim over a data breach in UK legal history following a 2018 incident that exposed details of more than 400,000 of its customers. More than 16,000 customers have joined the case ahead of a March deadline to sign up to the action, according to PGMBM, the lead solicitors in the group litigation case. The update comes after BA indicated it was prepared to settle claims in a letter filed with the court last week. The breach exposed the personal and financial data of more than 400,000 customers, and led to a GBP20m fine from the UK’s data protection regulator in October, down from an initial fine of GBP183m. The lawyers said victims could each be compensated up to GBP2,000, based on previous court rulings, leaving BA facing a total bill of more than GBP800m if every victim came forward. “We continue to vigorously defend the litigation in respect of the claims brought arising out of the 2018 cyber attack,” BA said. “We do not recognise the damages figures put forward, and they have not appeared in the claims,” it added. The Information Commissioner’s Office said the attacker potentially accessed sensitive information of BA customers, including names, addresses, payment card numbers and CVV codes. It pointed to measures the airline could have taken to reduce the risk, such as the testing of its cyber-defences. Still, it noted that BA had “considerably” improved its cyber security since.<br/>